$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2612e35b-0d4b-3643-bd2d-df6af960609a.roa File: 2612e35b-0d4b-3643-bd2d-df6af960609a.roa (raw, json) Hash identifier: J2yp7OwZlGg7BolKJ1hX6yE4M3uhr/QTXrvGlj4G2zE= Subject key identifier: AD:92:CA:85:12:3E:B4:78:63:8E:D4:A8:FC:20:46:DB:5A:EB:D3:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539E69C6AD9C4FC01CD2DCC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2612e35b-0d4b-3643-bd2d-df6af960609a.roa Signing time: Mon 28 Sep 2026 16:26:44 +0000 ROA not before: Mon 28 Sep 2026 16:26:44 +0000 ROA not after: Sun 27 Dec 2026 17:26:44 +0000 asID: 22773 IP address blocks: 66.210.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:69:c6:ad:9c:4f:c0:1c:d2:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:26:44 2026 GMT Not After : Dec 27 17:26:44 2026 GMT Subject: CN=33e0edc6-6e09-42fc-a296-640d35c5b46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:b1:39:c5:33:44:43:e1:23:21:2d:5d:6f: 09:8d:8c:aa:11:8b:45:5d:66:22:37:2c:81:b4:d1: 9b:4c:a4:4c:1a:2f:da:c4:e1:77:ee:5b:95:69:9b: 26:06:67:6b:5d:f1:ed:d4:01:39:f8:7d:5a:e5:46: de:e8:49:3c:d6:42:20:e8:31:2c:b8:b0:0d:05:22: 5b:0d:11:3a:22:d8:55:ca:4c:e3:b8:2b:bd:e3:59: 3c:28:2d:cf:ae:aa:7d:21:1b:c1:34:f8:c6:a6:fc: 2f:28:37:d0:73:d1:c4:ab:81:17:bd:4c:71:30:ce: eb:c1:1a:a6:b7:98:b6:e7:4e:f7:6b:5c:ef:fe:1c: 3f:27:74:39:07:b1:1b:fa:26:c1:ba:9d:ae:3e:01: 85:17:77:e3:d8:0d:9d:ae:d9:b4:2b:e1:95:ba:f6: b2:1f:88:f8:8b:63:3e:4b:85:be:17:a9:c0:58:ac: 2c:e6:93:14:58:16:7e:89:0b:8b:6e:46:48:d3:69: 3f:04:a2:e5:4e:82:2e:68:bc:9d:9a:eb:77:e8:29: 17:56:e6:6b:0b:9a:84:ba:ec:9a:5f:ed:6e:35:37: 4d:ea:bd:f1:76:3c:27:3b:b6:c0:c3:aa:0f:d3:a5: 92:6c:d0:3e:e3:d3:47:30:51:07:b8:2b:99:ac:b6: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:92:CA:85:12:3E:B4:78:63:8E:D4:A8:FC:20:46:DB:5A:EB:D3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2612e35b-0d4b-3643-bd2d-df6af960609a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 66.210.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:36:73:c2:52:ba:17:4e:38:fe:03:c7:d1:96:bf:b3:94:ae: 1f:d9:a3:30:9e:42:e5:fe:ef:d1:84:c9:96:8a:fd:e0:85:ad: 36:ba:94:63:52:02:d9:8b:4a:22:56:0b:a0:6e:57:37:76:23: f5:01:04:c0:8f:d4:d2:41:c0:cf:27:eb:45:2e:50:b8:f4:4a: 87:59:75:b0:40:1d:0a:7a:b1:cb:40:70:9d:0c:63:d3:89:15: 8e:2b:ed:bd:23:97:13:c2:18:8f:17:a8:f5:5c:07:af:fc:74: a6:61:09:1d:9b:bc:40:4b:b1:24:a2:43:f5:11:ce:c8:63:fe: 0e:17:21:8d:a0:39:65:d1:07:10:69:4b:0e:07:2f:46:3e:d4: 4d:03:27:98:85:0f:04:2a:2d:9d:a6:35:46:d7:24:8c:2c:c0: 85:36:b1:75:ba:fe:64:54:13:46:20:a9:44:33:9c:ba:66:b1: 24:4c:cc:5d:0e:50:20:51:3a:79:4b:dd:24:ac:1d:c9:8b:b8: 85:89:cb:34:c4:90:d4:75:de:39:aa:17:fc:0f:49:15:03:1a: 05:94:22:42:cf:8d:e4:00:f1:d9:43:64:b8:f7:7a:c5:12:50: b1:1b:90:69:54:44:e7:86:13:4c:ff:02:74:ee:f5:ed:61:58: a1:0d:48:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnmnGrZxPwBzS3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjY0NFoXDTI2MTIyNzE3MjY0NFowLzEtMCsGA1UEAxMk MzNlMGVkYzYtNmUwOS00MmZjLWEyOTYtNjQwZDM1YzViNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YixOcUzREPhIyEtXW8JjYyqEYtFXWYiNyyB tNGbTKRMGi/axOF37luVaZsmBmdrXfHt1AE5+H1a5Ube6Ek81kIg6DEsuLANBSJb DRE6IthVykzjuCu941k8KC3Prqp9IRvBNPjGpvwvKDfQc9HEq4EXvUxxMM7rwRqm t5i25073a1zv/hw/J3Q5B7Eb+ibBup2uPgGFF3fj2A2drtm0K+GVuvayH4j4i2M+ S4W+F6nAWKws5pMUWBZ+iQuLbkZI02k/BKLlToIuaLydmut36CkXVuZrC5qEuuya X+1uNTdN6r3xdjwnO7bAw6oP06WSbNA+49NHMFEHuCuZrLb4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2SyoUSPrR4Y47UqPwgRtta69MSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjYxMmUzNWItMGQ0Yi0z NjQzLWJkMmQtZGY2YWY5NjA2MDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtIbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw2c8JSuhdOOP4Dx9GWv7OUrh/ZozCeQuX+79GEyZaK/eCFrTa6lGNS AtmLSiJWC6BuVzd2I/UBBMCP1NJBwM8n60UuULj0SodZdbBAHQp6sctAcJ0MY9OJ FY4r7b0jlxPCGI8XqPVcB6/8dKZhCR2bvEBLsSSiQ/URzshj/g4XIY2gOWXRBxBp Sw4HL0Y+1E0DJ5iFDwQqLZ2mNUbXJIwswIU2sXW6/mRUE0YgqUQznLpmsSRMzF0O UCBROnlL3SSsHcmLuIWJyzTEkNR13jmqF/wPSRUDGgWUIkLPjeQA8dlDZLj3esUS ULEbkGlUROeGE0z/AnTu9e1hWKENSOA= -----END CERTIFICATE-----Generated at Wed Sep 30 15:45:07 2026 by rpki-client